The exposure of proprietary, sensitive, or classified information through either data theft or data leakage.SOURCE: SP 800-137